Behavioral task
behavioral1
Sample
b1f547fd496b4153c12ef3c1b3b47bba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1f547fd496b4153c12ef3c1b3b47bba_JaffaCakes118
-
Size
133KB
-
MD5
b1f547fd496b4153c12ef3c1b3b47bba
-
SHA1
9b1a4cee6d5ee17ef414d3d032826a57aec2c21b
-
SHA256
6d7077bda0acbebbbf326826e88bb63431b23b769f4946a20ea60db0e7f8b6aa
-
SHA512
071ed40ad685f798ef416e6d8837c26e1910bf65d9ea0e4abb0d80a765f4e0f14ef3e6390da7177f37606c21788987986ffabebb2391acd399a4b8d182b89451
-
SSDEEP
1536:3eNFrlTvbbVladlSgUG2+f2WTt9fpOQLgPui6M0vtKQOLw/2Nj:YRnYlVV2+f2IjpgmiRcAQzU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1f547fd496b4153c12ef3c1b3b47bba_JaffaCakes118
Files
-
b1f547fd496b4153c12ef3c1b3b47bba_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE